SSO - Revision history

Cna@inlogic.dk: /* Certificates - Update Service Communication Certificate */

2024-11-27T14:48:56Z

Certificates - Update Service Communication Certificate

← Older revision		Revision as of 14:48, 27 November 2024
Line 67:		Line 67:
	A connection to AD FS server, with administrator rights.		A connection to AD FS server, with administrator rights.

	~~First install~~ the certificate ~~on the server, select my computer when asked.~~		[https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/manage-ssl-certificates-ad-fs-wap#replace-the-tlsssl-certificate-for-ad-fs-running-in-default-certificate-authentication-binding-mode Manage TLS/SSL Certificates in AD FS and WAP in Windows Server 2016 \| Microsoft Learn]

	~~Now go to AD FS~~ -~~> Service~~ -~~> Certificates~~ -~~> Set Service Communications Certificate...~~

	~~Now select "view more"~~ -~~> And select the new~~ certificate

	~~[[File:ADFSChangeCertificate.png~~\|~~1389x1389px~~]]

	~~And now we need to set the certificate on the http.sys on adfs~~
	Set-AdfsSslCertificate -Thumbprint xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx		Set-AdfsSslCertificate -Thumbprint xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
	Now go to Services and restart the AD FS Service		Now go to Services and restart the AD FS Service

2023-09-14T13:17:53Z

← Older revision		Revision as of 13:17, 14 September 2023
Line 34:		Line 34:
	Where ID = <The id of the active setting>		Where ID = <The id of the active setting>
	It is the signing certificate the UMS needs from the ADFS.		It is the signing certificate the UMS needs from the ADFS.

			It is needed to be exported in base64 format, otherwise the UMS can't load the certificate.

	Now delete the old certificate files from your UMS folder, do an iisreset to let the UMS resolve the newly entered information in the databse.		Now delete the old certificate files from your UMS folder, do an iisreset to let the UMS resolve the newly entered information in the databse.

2023-01-16T08:09:56Z

Corrected spelling error on Set-AdfsSslCertificate -Thumbprint

← Older revision		Revision as of 08:09, 16 January 2023
Line 74:		Line 74:

	And now we need to set the certificate on the http.sys on adfs		And now we need to set the certificate on the http.sys on adfs
	Set-AdfsSslCertificate -~~Thumpprint~~ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx		Set-AdfsSslCertificate -Thumbprint xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
	Now go to Services and restart the AD FS Service		Now go to Services and restart the AD FS Service

2022-09-07T08:29:57Z

← Older revision		Revision as of 08:29, 7 September 2022
Line 367:		Line 367:
	<nowiki>http://www.gatepoint.ch/cmdreferenz/html/9341c753-11ff-4acc-993c-b05d50f32330.htm#bkmk_examples</nowiki>		<nowiki>http://www.gatepoint.ch/cmdreferenz/html/9341c753-11ff-4acc-993c-b05d50f32330.htm#bkmk_examples</nowiki>

	* Update metadata to Office365. ('''Update-MsolFederatedDomain -DomainName mydomain.com -SupportMultiDomain''')<br />		*Update metadata to Office365. ('''Update-MsolFederatedDomain -DomainName mydomain.com -SupportMultiDomain''')<br />

			=== FOCES certificate til STIL OIOSAML 3.0 ===
			https://www.nets.eu/dk-da/l%C3%B8sninger/nemid/funktionssignatur

	==Final==		==Final==
	<br />		<br />

2022-03-21T13:16:35Z

FAQ

← Older revision		Revision as of 13:16, 21 March 2022
Line 366:		Line 366:

	<nowiki>http://www.gatepoint.ch/cmdreferenz/html/9341c753-11ff-4acc-993c-b05d50f32330.htm#bkmk_examples</nowiki>		<nowiki>http://www.gatepoint.ch/cmdreferenz/html/9341c753-11ff-4acc-993c-b05d50f32330.htm#bkmk_examples</nowiki>
	<br />
			* Update metadata to Office365. ('''Update-MsolFederatedDomain -DomainName mydomain.com -SupportMultiDomain''')<br />

	==Final==		==Final==
	<br />		<br />

2021-08-23T13:35:11Z

Change ADFS certificates in UMS

← Older revision		Revision as of 13:35, 23 August 2021
Line 22:		Line 22:
	===Installation===		===Installation===

	== Change ADFS certificates in UMS ==		==Change ADFS certificates in UMS==
	The UMS server also needs the certificates from the ADFS server. This is done by consuming the metadata. <!-- You can use https://samlmd2cert.azurewebsites.net/ to get the certificate files. -->		The UMS server also needs the certificates from the ADFS server. This is done by consuming the metadata. ''You can use <nowiki>https://samlmd2cert.azurewebsites.net/</nowiki> to get the certificate files.'' <!-- You can use https://samlmd2cert.azurewebsites.net/ to get the certificate files. -->

2021-08-23T13:34:25Z

← Older revision		Revision as of 13:34, 23 August 2021
Line 21:		Line 21:

	===Installation===		===Installation===

			== Change ADFS certificates in UMS ==
			The UMS server also needs the certificates from the ADFS server. This is done by consuming the metadata. <!-- You can use https://samlmd2cert.azurewebsites.net/ to get the certificate files. -->


			When you have the new and updated certificates from ADFS it needs to be in rootfolder of the UMS Application.

			Physical path (C:\inetpub\wwwroot).

			And we need to update the records in the UMS database, if the name of the file has changed.
			Update SSOSetting set PartnerCertificateFile = 'TheNameOfCertificate_signing.cer'
			Where ID = <The id of the active setting>
			It is the signing certificate the UMS needs from the ADFS.

			Now delete the old certificate files from your UMS folder, do an iisreset to let the UMS resolve the newly entered information in the databse.

	==Changing the Self Signed Certificate in SSO.==		==Changing the Self Signed Certificate in SSO.==
Line 345:		Line 360:
	$httpHelper.DownloadFile($mUrl , "$($FilePath)")		$httpHelper.DownloadFile($mUrl , "$($FilePath)")

	== FAQ ==		==FAQ==

2018-12-05T14:39:07Z

2018-11-19T15:36:19Z

Certificates Update SSL

@@ Line 41: / Line 41: @@
 # In the properties dialog box for the trust, click Update to start the update.
 #When the update is complete, click OK.[[File:IIS-Cert-12.png|none|thumb|745x745px]]
 == Certificates - Automatic rollover ==

2018-09-11T09:57:14Z

Added adfs-token-certificate-rollover